Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File:                     mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier:          BUgeod7IcCdfdrcTB7VqJWxYfkSkqVhPhA9nEBexXoo=
Subject key identifier:   57:14:9A:0E:0A:47:6A:29:60:EE:DE:00:1D:C7:99:DA:2B:BF:74:11
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer:       /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial:       019D2772581E566551A828CF4225F584CB4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number:          0C2E
Signing time:             Thu 26 Mar 2026 00:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:38 +0000
Files and hashes:         1: V7JsXJ0GLKjgHsCk3ewLigNI5bU.roa (hash: h3m+52oeLH7xOWJ+THQYW7O1i1kOSNXejnm2XZ2qwIU=)
                          2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: Tku3Qoy96T544ghosKX9P2saqsURQQdJT3/jpAdeRzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:58:1e:56:65:51:a8:28:cf:42:25:f5:84:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
        Validity
            Not Before: Mar 26 00:01:38 2026 GMT
            Not After : Mar 27 00:01:38 2026 GMT
        Subject: CN=57149a0e0a476a2960eede001dc799da2bbf7411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:c0:4e:42:32:74:c0:e3:45:de:ae:17:1b:
                    b7:9e:2a:e6:ad:27:57:21:cb:73:a1:fa:b0:d3:e3:
                    90:cf:60:f0:d3:ed:e8:6d:1b:33:65:66:64:e9:46:
                    f4:13:3c:d0:f4:39:0c:03:e3:d7:5f:74:22:c8:d4:
                    e6:02:81:f3:31:05:03:01:88:82:aa:1f:24:55:c4:
                    8a:03:09:2e:6f:90:19:bb:23:67:7d:a8:4f:9e:74:
                    3a:dc:85:7a:5f:19:7f:b4:10:0c:e3:bd:f5:51:c1:
                    a6:91:0d:7e:29:fa:51:f6:b7:6c:27:ba:5d:a1:d1:
                    a4:f0:2a:76:7d:d2:59:a3:16:9e:3c:e4:75:9f:2c:
                    32:7d:b1:f9:d0:74:7a:50:d9:a2:c2:42:c7:29:7d:
                    73:9c:43:ab:7f:66:a7:2a:1c:e3:8b:10:89:ab:8e:
                    b0:07:c7:0f:f8:0f:6b:28:52:fd:35:a5:47:dd:33:
                    9e:54:8b:99:20:93:c0:cb:5b:5f:d7:7a:03:b7:78:
                    cf:0a:73:76:f8:5b:77:4d:a3:53:0f:82:d6:0c:e9:
                    63:ca:0e:e4:ad:85:58:1d:da:47:12:3e:1b:b7:4b:
                    0e:c7:bb:0c:56:4c:8d:2c:e7:3f:f2:5e:ff:cb:c9:
                    83:ca:71:e1:33:f1:14:fd:a6:8c:e6:92:7b:3a:60:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:9A:0E:0A:47:6A:29:60:EE:DE:00:1D:C7:99:DA:2B:BF:74:11
            X509v3 Authority Key Identifier:
                keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:89:6f:0c:ee:d3:e4:fa:79:40:68:21:f9:93:8b:84:a3:
         70:fc:b4:5c:58:be:cd:02:ff:53:bf:a8:66:07:ce:8e:b6:5c:
         0f:63:00:27:63:b0:1f:f1:76:fe:59:d6:a7:cf:4b:8f:68:38:
         3d:57:d3:ab:80:ee:ce:44:82:c6:0e:e5:be:dc:73:ea:ce:b3:
         76:16:ea:7d:49:bd:1f:22:10:d6:81:e9:d7:6b:e5:b0:f4:da:
         48:28:a3:ed:ae:71:77:23:f2:da:f8:e7:41:67:cf:61:f2:2f:
         54:9d:de:2d:0d:0a:c8:47:78:d3:68:36:3a:5a:4f:ff:a1:fd:
         6e:9c:76:e5:ea:25:c7:03:03:a8:71:16:7b:ba:d7:62:e7:36:
         96:fc:ee:cd:63:a0:be:22:d6:63:88:ba:b2:78:b2:d4:37:c2:
         63:71:44:96:b8:77:1f:62:66:b8:6d:61:a7:74:b7:a4:28:d1:
         18:80:bc:e0:2b:ca:41:8d:26:00:a6:78:5e:2c:16:45:aa:85:
         be:09:e0:20:f7:aa:de:08:e2:d1:cf:a0:3d:be:80:c3:ea:bd:
         2e:d4:c7:9b:63:20:26:15:c8:61:2a:c6:61:61:22:85:4b:f9:
         8e:18:e6:81:11:ef:8e:99:ef:ef:d9:67:fe:20:fd:b4:9b:c7:
         00:1f:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:17 2026 by rpki-client